fix #28, add verification of users