add tracking script to authentication