searching should require being authenticated
diff --git a/VERSION b/VERSION
index 4e379d2..bcab45a 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.0.2
+0.0.3
diff --git a/magpie/handler/search.py b/magpie/handler/search.py
index cf97632..9e0b54d 100644
--- a/magpie/handler/search.py
+++ b/magpie/handler/search.py
@@ -4,9 +4,12 @@
 from sh import find, grep, ErrorReturnCode_1
 from urllib2 import unquote
 
+from tornado.web import authenticated
+
 from base import BaseHandler
 
 class SearchHandler(BaseHandler):
+    @authenticated
     def get(self):
         query = unquote(self.get_argument('q'))
         try:
@@ -16,6 +19,7 @@
             results = ''
 
         # TODO filter out duplicates if the filename is already in the search results
+        # TODO this doesn't exclude the .git folder
         try:
             results += str(find(self.settings.repo, '-type', 'f', '-name',
                                 '*' + query + '*'))
diff --git a/todo.md b/todo.md
index 08e45d1..062cffe 100644
--- a/todo.md
+++ b/todo.md
@@ -8,9 +8,11 @@
 
 
 ### ``magpie/handler/search.py``
-(line 18) filter out duplicates if the filename is already in the search results
+(line 21) filter out duplicates if the filename is already in the search results
 
-(line 31) this doesn't play well with colons in filenames
+(line 22) this doesn't exclude the .git folder
+
+(line 35) this doesn't play well with colons in filenames
 
 
 ### ``magpie/template/base.html``