fix #8, add quotes around  in authenticateUser