finished section about authentication