add start of auth.  hardcoded for now