Why an authentication server? - comments