user authentication part1