Authentication moved to tdt/start