putting search under authentication