start of authentication