add an authenticate method