using AAD for authentication purposes