added authentication and ownership