non authed working, need to fix js though