changed authentication mechanism