put logs behind auth