force auth before gaining access to the fields