still trying to get user auth to work