auth for plugin requests