beginning of authentication