finshed authentication/user validation