make authentication work