stage of authentication