uncommented authentication code