begin integration of authentication. currently insecure