auth_user callbacks fixed