user authentication work plus user signout working