reflection and authentication