moved auth to request