changes to user auth