added auth for viewing