authentication pages passing