working example of authentication up