add auth to prod