user authentication, index and destroy