authentication partially done