add authenticated retrieval