Question about Authentication flow.