properly implemented authentication with policies