fix findAll, and begin to add authentication
add authentication / login - logout