change user authentication response