login directs to step one