finish adding authentication