added authentication api