fixed authentication procedure