updated authentication and validation