finish authentication, authorization