added authentication for heroku