added auth rules