authentication skeleton