authentication now work....for now