add authenticated API for add/remove/list Subscriptions