finish up user authentication