most of authentication finished