first pass at authentication