use Clearance for authentication