start of the auth action