added authentication strategy