update TODO
add handler for authentication