add some auth support kind of