add auth, update doc