clarified authentication in browser