user auth changes