more on sip2 authentication