assets and authentication