initial front-end user authentication