begin authentication and authorization on server