rewriting the Authenticator