authenticate works but 2 different forms
mostly working, need to check last changes