adding authentication layer