add authentication for app.