starting to add authentication