added authentication endpoint