tightened authentication requirements