moves user-authentication and user-service into lib folder

fixes #4