new try at user/auth, passing tests