added authentication to the looking-glass service