added authentication requirement