use user_provider instead of manager