add auth for server