fix for user login authorities -- still need fix for social