fix user auth bug