no need for a custom authenticator