adding supportr for optional shared secret auth