use authentication variables for prepare