scaffold authentication