user authentication and access manager