add auth and db