add auth to newsitems controller