initial auth structure