authentication and permissions have been set up