Authentication has to be a list