added auth against backend