user reauthentication event handler