everything works for users can log in