users and groups
prepare auth
removed unnecessary return