user may use permanent authentification