auth for json based req/responses