request authentication management, login stuff