add readme to root and some work on authentication