allow new people, added auth