added authentication and authorization