authentication complete and working