add authentication step