adding auth - started to require requests