use a user-triggered button to start auth.