added auth file and fixed permissions