added to-do and requirements to rdme
moved authentication to separate method