add authentication for nickname api