working authentication scheme