can do authenticate properly