move storage to service
add auth handler
add auth handler
format
add authrequire