added Rack authentication