added missed auth-related index.js