before making changes to authentication