lets make retrieval also authenticated