sec on: stage1
sec on: stage2; auth ok