added authorisation to restul module