apply auth to handlers
handler fixes