changed how autheticate works
add username to user