Add authentication and authorization