authenticated directory listing