modify user authentication