moved authentication into an aspect