authentication against script problem