initial setup for authorization