finished user and server authorization and auth