add authentication to post