added auth for api task