continued work on user authentication