updates to user auth