working authentication
finished