auth to enable more APIs is now working