userinfo without audit info
security auth corrections