working on user auth can create but not login