check in source for authentication fsm