authenticate user with post
removed html template