sz - move authenticate user to the right place