add auth to other api calls