added auth with realzy passwords and state on clinet side