higher level authentication procedure