user creation and authentication, cleanup