added auth to backend and frontend