adding authentication handler