put authentication back in