allow per user authentication
bump version