WM: lily authoriz step 1