fixed problem where wrong user was being returned of auth validation