include key in json serialization for creation
add authentication