variables for authenticator and authorizer