adding the right auth attribute