authenticate and fetch