add authentication mechanism