before authentication ch 21