require once authenticate moved