initial working handling of authentication failures