intermediate authentication
merge