auth before each call to support multiple users