Collection request require auth