add auth for seeing pending requests