adding everything up to this point, and then going on to break the authentication