shouldAuthenticate