check for authenticated earlier, refs #6633