add authentication and teacher rights