force authentication for whole application