authentication is required to login