stage 1 of authentications