made authentication rules