make sure to auth before creating hooks