User authentication refined