add auth for api item creation