better authentication rather than simple