adding explicit host-based authentication