verifies users, requires testing