auth strategy on batch route