refactoring; adding authentication