added authentication action, needs better error checking