Biometric authentication in a communications system