working authentication spike