The authentication logic