transparent authentication and authorization