add auth check for menu