added auth app for experimenting with authorization