adding authentication mechanism