code clean
basic user authentication