starting to add basic auth