create user after authenticating