auth user for menus