user authentication fix