add like/unlike auth check