add more info about authentication