add authentication in create spot call