feat: enable auth for block