add an Authenticated action which requires requests to be hmac signed