initialize with authentication first-pass