re-authenticate on first attempt