add secret based authentication endpoint