add authenticate user where appropriate