initial auth setup