it sets authenticating to true