add a authentication hook for forem which should be implemented by apps