Add authentication logic to /signin