logic change about user authentification