done deal on authentication