revised authentication mechanism