user auth reworking