add some auth

blabla