authentication works 2.0