authenticate user when they reply