changed authentication to use a single passcode