authentication and authorization is working swell