Add proper authentication logic