fixed auth, must also watch the content for isMe