added auth statement