Authenticating MACs and users