Am I doing Authentication correctly? - C#