add authentication to event handlers