every function called with state should be context managed with auth (#2813)