created authentication step 1