account manager handles user authentication