make authentication work!