todo on how to proceed with authentication