authentication checks added where they're needed