update user auth handling to pass single auth param