authentication mechanism improved