added auth api