frontend authentication working using .user