user auth bug fix