Authorization should be live for posting, need to make it so you can only get stuff you own.