first stage of user authorization complete