AuthenticationManager handles business logic