rough in for authentication