do we need auth too?