minor changes to UserAuth