added auth-like js payload