don't authenticate if already has