who is authenticated (signed in) -> 鉴权