add user authenticate ( ugh =S ) #3 #12