start of login flow