replace this following tutorial here: https://github.com/dabit3/build-an-authenticated-api-with-cdk