finished authentication features, minus extra protections. end of section 15