old authentication removed