working through authentication