comment to authenticate