added authentication to all api calls