start on authentication