User auth works at all.