Adding auth on a query