added authentication handler