added partial user auth