expanded authentication