move pandora init down

this executes the service authentication right away and therefore should
be done after proxy config