removed auth policy on user create, added login after user creation