changed to plain authentication