document authenticate, add reauthenticate