add required auth