authentication feature with the first scenario