finish up user authentication feature