add user authentication in GET request