1 step closer; need to debug to understand why it doesn't authenticate