change to user authentication