fixed userauth