added directive for auth