got user auth working