giro user finito. riveder auth