add simple authentication