add authentication to application and role apis