updated scratch for Auth ==> Userpass