starting to add auth