add auth scope
use cdn