1. add kh authentication