needs autentication to all app