add authentication on all the sensitive methods