add the auth function
update the model to add the auth