fixed authentication process