GDPR: What you need to know and how authentication fits in