Add proper auth checking.