added authentication with persistent session