now handles authentication, full testing done