- now authenticating persistent user credentials