user authentication patch