cost now requires authentication