use refactored NegotiateAuthenticationStrategy (instead of DynamicAuthenticationStrategy)