authentication - done, missing only html