initial call with no auth