finish authentication using sorcery