add auth (does not do anything)