user auth nearly up and running