some code to allow a user to auth()