user auth
fix