user authentication via providers + provider for SSO