finished 3 way auth