User authenticate flow