XtUser authentication