Require authentication for create / update / delete
Typo
Erm.. TODO comments!