starting auth