added some handlers and mandatory auth