handling of success/failure auth