documentation for when-authenticated