still need manual authenticator for now