authentication flags added to all states