add auth security in crud handler class