authentication and permission package