added authentication for new and create