basic user authentication for forms