fine tune authentication parameters