adding kerberos authentication