add authentication as default viewset state; include merchant_short_name as class variable when available