async authentication, checking user in db