user auth works
auth works