use correct key for authentication