isAuthenticated passing for users