feat(strategy): authentication