re-add auth requirements