first stage of authentication done