user auth and management corrections