putting back auth checking