add some auth stuff