private methods authentication