add ensure authenticated