added auth verification, before clause