correct authentication throughout application