you can define the auth during each request