add authentication in api plans show and index actions