Authentication flow using 1st party gateway and payments