finish verify, and finish mac test,  now auth