moved the authentication stuff