add authentication for Api users