checking authentication (work in progress)