user authentication now fully functional