adding auth - not sure it works though