auth in place, created a user preference path