add authentication in production