add some checks about setup to authentication