authenticator (weaving in exceptions lessons)