doing first call to authenticate the user