add authentication api