changes to user authentication