User auth servlet