add authentication template
use session