add some auth