authenticate around operating