now handle checksum 'authentication' too