create _trust_state container on login if it doesnt exist