put authentication in wrong file