added authentication rules