changed on authentication code