add auth in video.php