final authentication