add authentication without routing