first piece of auth