user authentication required beyond list of hospitals