auth check added