Palm-vein authentication in practice