authenticate events allow async auth - tests, doc, working