add authentication on first request