updated to private authentication