add login authentication