move authentication into new file location