try to implement authentication, not working yet