first authentication pass