fixed basic user authentication