add auth logic to site