add subfolders & auth