initial authorization code