added auth control