Added auth to most calls where required. Ready for client side work