authtication for get list requests