cofusing with authentication