half of authentication