add authentication token & confirmable