make sure the authentication and authorization methods are called