added authentication (ch.14)