authentication required for vacations