require auth to dispute