only authentify if pass is set