added two comments to authentication