add in an auth token check for writes to the database