log based on file-level; authcode verification