more auth work, rough form for adding records