initial authentication and personalization