authticate user in post