added comments and basic http auth