auth search api too