#60 authenticate correctly