add auth feature