implement proper authentication messages