before start
auth against DB