took out unneeded assertion
added auth checks. needed cryptoutils to do this