step 3 tutorial add authentication