auth user sequence