update authentication so auth is tested for every request, instead of saved into the txn