force authenticate user