authentication is working now