add some authentication