GET subs, POST subs auth