authenticate user by default