user associations and authentication