working on authenticate, pre password digest