start adding authentication