add lookup-based authentication