More work on user authentication