checkpoint for authentication