commiting before messing with user authentication