fixed authentication method