pre user-authentication