added authentication for real this time