fixed auth and added image