implement authentication to prevent attacker to attack other users