first steps at authentication