describe ticket based auth