add authentication on signing in