auth begins