trying to figure out authentication