authenticating mess