end to end userauth with hardcoded strings