authtenticate users with their own credentials