added auth todo