add auth to view