correct authenticate link. add info box for failed subuser authentication.