fixed authentication, complex authenticator behaviour still to be implemented