Update to require auth