it resolves with an authentication request