add authentication logic