some changes on user auth