initial try and multiple token authentication