add common-auth