finished user controller, started authentication