form auth method
auth root strategy