finish up authentication endpoint