how to allow only one authentication ?