authentication in front-end