user authentication tody up and toil improvements