changed user authentication database to be more streamlined with error and to use body instead of params