authentication checkpoint