user auth recipe example works but missing features