subscriber authentication