set authenticaton for api resources