separate user authentication from tsStore into tsAuth