added authentication to all handlers