sketch of strategy authenticate method