Put some rudimentary auth checking on the put for the paid option.