You still need an auth function for every action as stated above.