maybe i should add the authentication strategy