add auth to contact resource