fix authenticate user