add auth API calls