authentication and state