add auth interceptor