added auth to resources still to test