one page auth attempt