add authentication to ability writing