authenticate hidden entry
