added authentication and authorization to the framework