authentication now works. There is a bug with TOLERANCE