now calls to backend for user auth