starting on auth implementation