first steps towards user authentication