added auth checks, with some tests(not all compete yet), account checks not working yet