initial working setup without security