save user AFTER verification