user auth working now