PDO used user authentication