authenticate before wipe