[VP] #3 authenticating the user