fixes #1, authing with unknown user