issue #19290: using our own authentication check