upgraded authentication process