referral authentication