add authentication on model