currently there is no authentication need to decide what level of auth we need and then implement it may also include access control/permissions