add auth with tests
Merge pull request #8 from sotoseattle/ch_8

add authorization with tests