set auth user correctly