failsafe authentication