first round of working authentication