start working on authentication