add auth.jsp