user authenticate part1
finish user authentication