handle authentication for the user webservice