committing before adding authentication