auth entry point implementation