auth: add authentication object