Updating course.item.list to support auth directive