Location-based authentication for mobile users