authenticate is now working for admin