finding and authenticating a user