adding in auth at method level