get authenticated users properly