add authentication to web interface