cores.json authentication secured