Add user authentication around rescinding