user auth/db functioning