authentication restrictions