add auth to model