prepending past messages properly with proper authentication