add login to check if is auth