Moving to required authentication, and returning all locations rather than only the first