add some boilerplate for the first auth step

Signed-off-by: Ricky Elrod <ricky@elrod.me>