authority checking, first steps