added auth in production