adding s2s auth