user authorization after registration