set the keys before checking auth