add require auth