initial authentication infrastructure