unfinished authentication implementation