working on  authentication