iteration I3:authenticating users