move authentication handlers