add AuthenticationManager injection