moved authentication